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Ransomware Attacks Are Testing 
Resolve of Cities Across America 
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Texas government organisations hit by 
ransomware attack 
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Ransomware attacks on the rise - and 
small towns are in the crosshairs 
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How Ransomware Attacks Are Forcing Big Payments From Cities, Counties 


Computers were shut down at the ELM. Gilliam Memorial Library following a ransomware attack in 
Wilmer. Tex. Cooper Neill for The New York Times 
















Who is Behind the Attacks? 



OUTMODED MOVIE 
STEREOTYPE 


ACTUAL LIST FROM FBI MOST WANTED 

https://www.fbi.gov/wanted/cyber 
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Why is the Rjblic Sector Taraeted? 



MISSION CRITICAL 
OPERATIONS 




BUDGET/FUNDING LEGACY 

INFRASTRUCTURE 
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How Do Attacks Happen? 
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PHISHING 

1$ A BROAD. AUTOMATE 0 ATTACK 
THAT IS LESS SOPHISTICATED. 


SPEAR-PHISHING 

IS A CUSTOMIZED ATTACK ON A SPECIFIC 
EMPLOYEE & COMPANY 


NETWORK 


EMAIL 




The site ahead contains malware 

Attackers may trick you into doing something dangerous like installing 
software or revealing your personal information (for example, passwords, 
phone numbers or credit cards). 


0 Autopiatkjlly report tfrtgik of possible vkv rify incHfents to Gwgfto. Privacy policy 
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Emotet Infected System(s) 


Emotet C2 





Victim Network is Ransomed 


https://www.krvptoslogic.com/blog/2019/01/north-korean- 

apt-and-recent-ryuk-ransomware-attacks/ 






















































NIST Cyber Security Framework 
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What Have We Done So Far? 


Modernized Infrastructure 




60 % of systems are Cloud- 
Hosted 


"Next Gen" Firewalls 

(IDS & IPS & Content Filtering) 

365 Advanced Threat Protection 

(Links, Attachments) 

Endpoint Protection on City 
desktops/laptops 

Working with CryptoMove, Maze 
& Associates, and NCRIC 
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WELCOME TO 
PUT KNOX 













































More 
1o Do 



Work with Maze on a Ransomware 
Assessment 


AdcTt Endpoint Protection 

User Awareness Training 


Replace Backup System + Build 
Disaster Recovery System 


Regional Collaboration on Incident Response 
(Nearby Cities, Counties, NCRIC, PD, EOC) 
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Cybeisecurity Awareness Month 2019 



http://sanleandro. ora/depts/it/cvberawareness/default. asp 
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